PT-2022-2265 · Mozilla +10 · Firefox Esr +11

🗓️ 21 Sep 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 11 Views

Use-after-free in VR process destruction may allow remote code execution; affects Thunderbird and Firefox ESR before 91.8.

Reporter	Title	Published	Views	Family All 11453
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 78.14.0 ESR +CVE-2021-38493) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF14	15 Dec 202113:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring	18 May 202111:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 68.12.0 ESR + CVE-2020-15659) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF11 + ICAM2019.3.0 - 2020.2.0	27 Sep 202010:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	29 Apr 202502:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 68.12.0 ESR + CVE-2020-15664) hava affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF11 + ICAM2019.3.0 - 2020.2.0	27 Sep 202009:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 68.5.0 ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF10 + ICAM 3.0 - 4.0	1 Apr 202010:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	19 Jun 202517:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 68.9.0 ESR + CVE-2020-12410) hava affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF11 + ICAM2019.3.0 - 2020.2.0	1 Sep 202010:37	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security contains security vulnerabilities	13 May 202121:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 78.5 ESR + CVE-2020-15683) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF12 + ICAM2019.3.0 - 2020.2.0	25 Feb 202107:56	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_jit_use_after_free.rb
github	www.github.com/mistymntncop/CVE-2022-1802
github	www.github.com/0vercl0k/CVE-2022-28281
github	www.github.com/mistymntncop/CVE-2022-26485
github	www.github.com/aleksejspopovs/cve-2020-16012
github	www.github.com/rojhack/CVE-2020-6514
github	www.github.com/R0jhack/CVE-2020-6514
github	www.github.com/hasan-khalil/CVE-2020-6514
github	www.github.com/HassanAzze/CVE-2020-6514
web	www.web.archive.org/web/20250000000000*/https:/github.com/MagicPwnrin/CVE-2022-28282

29 Dec 2022 00:00Current

8.6High risk

Vulners AI Score8.6

CVSS 3.16.5 - 10

CVSS 210

EPSS0.5063

SSVC